Restrict access to danse_user_notifications view
>>> [!note] Migrated issue
<!-- Drupal.org comment -->
<!-- Migrated from issue #3469519. -->
Reported by: [rclemings](https://www.drupal.org/user/917304)
Related to !18
>>>
<h3 id="summary-problem-motivation">Problem/Motivation</h3>
<p>By default, non-admin users cannot see the notifications lists of other view, but they can still see the empty notifications view. And as far as I can tell, the notifications tab still appears on the other user's profile.</p>
<h4 id="summary-steps-reproduce">Steps to reproduce</h4>
<p>Install, login as a non-privileged user, and go to another users profile (/user/NNNN). Or go directly to the other user's notifications view (/user/NNNN/notifications).</p>
<h3 id="summary-proposed-resolution">Proposed resolution</h3>
<p>Per @jurgenhaas on Slack (<a href="https://drupal.slack.com/archives/C01KRB0TD6K/p1724126402352779">https://drupal.slack.com/archives/C01KRB0TD6K/p1724126402352779</a>): "However, we could define a route for danse.notifications similarely to danse.subscriptions, but then we should also use that for the XML feed of the notifications."</p>
<h3 id="summary-remaining-tasks">Remaining tasks</h3>
<h3 id="summary-ui-changes">User interface changes</h3>
<h3 id="summary-api-changes">API changes</h3>
<h3 id="summary-data-model-changes">Data model changes</h3>
issue